0c4cf5dbf81d8e1c76620e8d65580f44 | Triage

Sharing

General

Target

0c4cf5dbf81d8e1c76620e8d65580f44
Size

660KB
MD5

0c4cf5dbf81d8e1c76620e8d65580f44
SHA1

7dba2512e1c5ea0366ec755538229b8fbe707b33
SHA256

cb8d379621f3059d5b2d7469fafde17a0323970af1a8163d24fd22d134c5d9e1
SHA512

02879ce03039fc270888059d42ed9973a26c99aa04cdb9815ecadc4c52d83742eb3bf02344227b86d217969bbfe4c2bc98455d2ef090afec2a74cc2701c86780
SSDEEP

12288:eMeir9EmOxeb4GrePa9YtDlIBDydUE1uZAYLaKy2iydU6W98Sm:vEob4AePa96RIBDA1hYTiyK6Y8Sm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c4cf5dbf81d8e1c76620e8d65580f44

Files

0c4cf5dbf81d8e1c76620e8d65580f44
.exe windows:4 windows x86 arch:x86

1ab51777bfe8717f0e66171283188471

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CreateFileA
TransmitCommChar
VirtualProtectEx
ExitProcess

user32

ShowCaret
GetCaretBlinkTime

Sections

CODE
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: - Virtual size: 616KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ldata
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ecode
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ